Recorded Future IP Intelligence

IP Address Enrichment using Recorded Future Intelligence

Pack

RecordedFuture

Tasks

7

Inputs

• IP — The IP address to enrich.

Outputs

• DBotScore.Indicator — The indicator that was tested
• DBotScore.Type — Indicator type
• DBotScore.Vendor — Vendor used to calculate the score
• DBotScore.Score — The actual score
• IP.Address — IP address
• IP.ASN — ASN
• IP.Geo.Country — IP Geolocation Country
• RecordedFuture.IP.criticality — Risk Criticality
• RecordedFuture.IP.criticalityLabel — Risk Criticality Label
• RecordedFuture.IP.riskString — Risk String
• RecordedFuture.IP.riskSummary — Risk Summary
• RecordedFuture.IP.rules — Risk Rules
• RecordedFuture.IP.score — Risk Score
• RecordedFuture.IP.firstSeen — Evidence First Seen
• RecordedFuture.IP.lastSeen — Evidence Last Seen
• RecordedFuture.IP.intelCard — Recorded Future Intelligence Card URL
• RecordedFuture.IP.type — Entity Type
• RecordedFuture.IP.name — Entity
• RecordedFuture.IP.id — Recorded Future Entity ID
• RecordedFuture.IP.location.asn — ASN number
• RecordedFuture.IP.location.cidr.id — Recorded Future CIDR ID
• RecordedFuture.IP.location.cidr.name — CIDR
• RecordedFuture.IP.location.cidr.type — CIDR Type
• RecordedFuture.IP.location.location.city — IP Geolocation City
• RecordedFuture.IP.location.location.continent — IP Geolocation Continent
• RecordedFuture.IP.location.location.country — IP Geolocation Country
• RecordedFuture.IP.location.organization — IP Geolocation Organization
• RecordedFuture.IP.metrics.type — Recorded Future Metrics Type
• RecordedFuture.IP.metrics.value — Recorded Future Metrics Value
• RecordedFuture.IP.threatLists.description — Recorded Future Threat List Description
• RecordedFuture.IP.threatLists.id — Recorded Future Threat List ID
• RecordedFuture.IP.threatLists.name — Recorded Future Threat List Name
• RecordedFuture.IP.threatLists.type — Recorded Future Threat List Type
• RecordedFuture.IP.relatedEntities.RelatedAttacker.count — Recorded Future Related Attacker Count
• RecordedFuture.IP.relatedEntities.RelatedAttacker.id — Recorded Future Related Attacker ID
• RecordedFuture.IP.relatedEntities.RelatedAttacker.name — Recorded Future Related Attacker Name
• RecordedFuture.IP.relatedEntities.RelatedAttacker.type — Recorded Future Related Attacker Type
• RecordedFuture.IP.relatedEntities.RelatedTarget.count — Recorded Future Related Target Count
• RecordedFuture.IP.relatedEntities.RelatedTarget.id — Recorded Future Related Target ID
• RecordedFuture.IP.relatedEntities.RelatedTarget.name — Recorded Future Related Target Name
• RecordedFuture.IP.relatedEntities.RelatedTarget.type — Recorded Future Related Target Type
• RecordedFuture.IP.relatedEntities.RelatedThreatActor.count — Recorded Future Related Threat Actor Count
• RecordedFuture.IP.relatedEntities.RelatedThreatActor.id — Recorded Future Related Threat Actor ID
• RecordedFuture.IP.relatedEntities.RelatedThreatActor.name — Recorded Future Related Threat Actor Name
• RecordedFuture.IP.relatedEntities.RelatedThreatActor.type — Recorded Future Related Threat Actor Type
• RecordedFuture.IP.relatedEntities.RelatedMalware.count — Recorded Future Related Malware Count
• RecordedFuture.IP.relatedEntities.RelatedMalware.id — Recorded Future Related Malware ID
• RecordedFuture.IP.relatedEntities.RelatedMalware.name — Recorded Future Related Malware Name
• RecordedFuture.IP.relatedEntities.RelatedMalware.type — Recorded Future Related Malware Type
• RecordedFuture.IP.relatedEntities.RelatedCyberVulnerability.count — Recorded Future Related Vulnerability Count
• RecordedFuture.IP.relatedEntities.RelatedCyberVulnerability.id — Recorded Future Related Vulnerability ID
• RecordedFuture.IP.relatedEntities.RelatedCyberVulnerability.name — Recorded Future Related Vulnerability Name
• RecordedFuture.IP.relatedEntities.RelatedCyberVulnerability.type — Recorded Future Related Vulnerability Type
• RecordedFuture.IP.relatedEntities.RelatedIpAddress.count — Recorded Future Related IP address Count
• RecordedFuture.IP.relatedEntities.RelatedIpAddress.id — Recorded Future Related IP address ID
• RecordedFuture.IP.relatedEntities.RelatedIpAddress.name — Recorded Future Related IP address Name
• RecordedFuture.IP.relatedEntities.RelatedIpAddress.type — Recorded Future Related IP address Type
• RecordedFuture.IP.relatedEntities.RelatedInternetDomainName.count — Recorded Future Related Domain Name Count
• RecordedFuture.IP.relatedEntities.RelatedInternetDomainName.id — Recorded Future Related Domain Name ID
• RecordedFuture.IP.relatedEntities.RelatedInternetDomainName.name — Recorded Future Related Domain Name Name
• RecordedFuture.IP.relatedEntities.RelatedInternetDomainName.type — Recorded Future Related Domain Name Type
• RecordedFuture.IP.relatedEntities.RelatedProduct.count — Recorded Future Related Product Count
• RecordedFuture.IP.relatedEntities.RelatedProduct.id — Recorded Future Related Product ID
• RecordedFuture.IP.relatedEntities.RelatedProduct.name — Recorded Future Related Product Name
• RecordedFuture.IP.relatedEntities.RelatedProduct.type — Recorded Future Related Product Type
• RecordedFuture.IP.relatedEntities.RelatedCountries.count — Recorded Future Related Countries Count
• RecordedFuture.IP.relatedEntities.RelatedCountries.id — Recorded Future Related Countries ID
• RecordedFuture.IP.relatedEntities.RelatedCountries.name — Recorded Future Related Countries Name
• RecordedFuture.IP.relatedEntities.RelatedCountries.type — Recorded Future Related Countries Type
• RecordedFuture.IP.relatedEntities.RelatedHash.count — Recorded Future Related Hash Count
• RecordedFuture.IP.relatedEntities.RelatedHash.id — Recorded Future Related Hash ID
• RecordedFuture.IP.relatedEntities.RelatedHash.name — Recorded Future Related Hash Name
• RecordedFuture.IP.relatedEntities.RelatedHash.type — Recorded Future Related Hash Type
• RecordedFuture.IP.relatedEntities.RelatedTechnology.count — Recorded Future Related Technology Count
• RecordedFuture.IP.relatedEntities.RelatedTechnology.id — Recorded Future Related Technology ID
• RecordedFuture.IP.relatedEntities.RelatedTechnology.name — Recorded Future Related Technology Name
• RecordedFuture.IP.relatedEntities.RelatedTechnology.type — Recorded Future Related Technology Type
• RecordedFuture.IP.relatedEntities.RelatedEmailAddress.count — Recorded Future Related Email Address Count
• RecordedFuture.IP.relatedEntities.RelatedEmailAddress.id — Recorded Future Related Email Address ID
• RecordedFuture.IP.relatedEntities.RelatedEmailAddress.name — Recorded Future Related Email Address Name
• RecordedFuture.IP.relatedEntities.RelatedEmailAddress.type — Recorded Future Related Email Address Type
• RecordedFuture.IP.relatedEntities.RelatedAttackVector.count — Recorded Future Related Attack Vector Count
• RecordedFuture.IP.relatedEntities.RelatedAttackVector.id — Recorded Future Related Attack Vector ID
• RecordedFuture.IP.relatedEntities.RelatedAttackVector.name — Recorded Future Related Attack Vector Name
• RecordedFuture.IP.relatedEntities.RelatedAttackVector.type — Recorded Future Related Attack Vector Type
• RecordedFuture.IP.relatedEntities.RelatedMalwareCategory.count — Recorded Future Related Malware Category Count
• RecordedFuture.IP.relatedEntities.RelatedMalwareCategory.id — Recorded Future Related Malware Category ID
• RecordedFuture.IP.relatedEntities.RelatedMalwareCategory.name — Recorded Future Related Malware Category Name
• RecordedFuture.IP.relatedEntities.RelatedMalwareCategory.type — Recorded Future Related Malware Category Type
• RecordedFuture.IP.relatedEntities.RelatedOperations.count — Recorded Future Related Operations Count
• RecordedFuture.IP.relatedEntities.RelatedOperations.id — Recorded Future Related ID
• RecordedFuture.IP.relatedEntities.RelatedOperations.name — Recorded Future Related Operations Name
• RecordedFuture.IP.relatedEntities.RelatedOperations.type — Recorded Future Related Operations Type
• RecordedFuture.IP.relatedEntities.RelatedCompany.count — Recorded Future Related Company Count
• RecordedFuture.IP.relatedEntities.RelatedCompany.id — Recorded Future Related Company ID
• RecordedFuture.IP.relatedEntities.RelatedCompany.name — Recorded Future Related Company Name
• RecordedFuture.IP.relatedEntities.RelatedCompany.type — Recorded Future Related Company Type

Commands used

• recordedfuture-intelligence
• setIndicator